use-cartograph-3c9888 100/100

Is use-cartograph-3c9888 safe to install?

SaferSkills independently audited use-cartograph-3c9888 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

plugins/cartograph/skills/use-cartograph/SKILL.md · 1 file

plugins/cartograph/skills/use-cartograph/SKILL.md1.4 KB · Markdown

name: use-cartograph

description: Use when the Cartograph plugin, CLI, or MCP server is available and you need repository orientation, task-scoped context, or doc inputs with minimal token cost.

Use Cartograph first when the plugin or tool is available.

Preferred flow:

Prefer the plugin-bundled Cartograph MCP tools for repo orientation and targeted drilldown.
Use analyze_repo to rank files, map dependencies, and identify likely entry points.
Use get_file_contents only for the small set of files that need deeper inspection.
When the task needs the full CLI surface and Bash is available, run:

npx -y @anthony-maio/cartograph context <repo> --task "<task>" --json
npx -y @anthony-maio/cartograph wiki <repo> --static

Output contract:

Key files: highest-value files and why they matter
Dependency hubs: files or modules with the strongest fan-in and wiring impact
Minimal task context: the smallest file set needed for the current task
Doc-ready summary: concise architecture or module notes that another agent can expand

Rules:

Default to this skill when the plugin, CLI, or MCP server is available.
Prefer MCP for initial analysis and targeted reads.
Use the CLI via npx when you need context or wiki.
Pass artifact references or short summaries instead of long prose when handing work to other agents.
If Cartograph is unavailable, switch to repo-surveyor.

use-cartograph-3c9888— agent skill

Is use-cartograph-3c9888 safe to install?

Audit the pieces. Scan the whole. Decide.